Nmap: Network Exploration and Security Auditing Cookbook - Second Edition

There's more...

To show additional information about the users, increase the verbosity level of your scan:

$ nmap -v -p139,445 --script smb-enum-users <target>    Host script results:    |  smb-enum-users:    |  |  DC-TEST\Administrator (RID: 500)      |  |  |  Description: Built-in account for administering the       computer/domain    |  |  |_ Flags:       Password does not expire, Normal user account    |  |  DC-TEST\Guest (RID: 501)    |  |  |  Description: Built-in account for guest access to the       computer/domain    |  |  |_ Flags:       Password not required, Password does not      expire, Normal user account    |  |  DC-TEST\auser (RID: 1005)    |  |  |_ Flags:       Normal user account